The government has unveiled a new Cyber Resilience Bill, aimed at boosting regulators’ authority over cybersecurity incidents and requiring reporting for ransomware attacks.
The bill was introduced during today’s King’s Speech, among 40 other bills. It comes in response to cyber attacks on the UK’s digital economy by cybercriminals and state actors, impacting public services and infrastructure.
Following a recent Russian cyber attack on Synnovis, a company providing pathology services to the NHS, patients may face delays of up to six months for blood tests.
The bill will extend regulators’ oversight to supply chains to tackle supply-side attacks and ensure cyber safety measures are implemented. It will also mandate increased incident reporting, including for ransomware attacks.
Experts like Jamie Maccoll from RUSI believe mandatory reporting of ransomware will help understand the scale of cybercrime in the UK, aiding in policy design.
Rohan Massey from Ropes and Gray sees the new bill aligning with the EU’s NIS2 Directive, enhancing security governance for critical infrastructure and public services.
With cyber attacks becoming a standard part of conflicts, industry experts emphasize the importance of focusing on cybersecurity in modern conflict management.
Additionally, a Digital Information and Smart Data Bill may impact businesses in the UK by reforming data-sharing standards and granting new powers to the Information Commissioner’s Office.
While Labour’s manifesto promised regulations on AI operators like Google and Microsoft, an AI Bill was notably absent from the recent announcements, leaving room for collaboration between industry and government to navigate upcoming laws on AI.